Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144551.roa
File: AS144551.roa (raw, json)
Hash identifier: QqOvlSQRyE4aoaanF0+LAvE1Jj7lAFbPBzIi3FIDIS4=
Subject key identifier: 9A:E1:05:92:BC:C6:8A:60:14:46:31:D3:8A:C1:17:1D:0F:55:9D:7A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5D0FDF665A633CCFAA5C3855734887EDE0989F6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144551.roa
Signing time: Mon 25 May 2026 02:22:45 +0000
ROA not before: Mon 25 May 2026 02:17:45 +0000
ROA not after: Mon 24 May 2027 02:22:45 +0000
asID: 144551
IP address blocks: 240a:a76d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0f:df:66:5a:63:3c:cf:aa:5c:38:55:73:48:87:ed:e0:98:9f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:45 2026 GMT
Not After : May 24 02:22:45 2027 GMT
Subject: CN=9AE10592BCC68A60144631D38AC1171D0F559D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:a2:da:2d:90:96:4f:00:99:32:64:79:3a:
3f:16:ce:07:09:8a:35:c1:1f:7e:ad:fc:a7:cc:2e:
22:af:cb:80:af:83:e4:9d:59:c0:21:be:9e:c1:1b:
9e:92:5b:83:74:3c:07:5b:47:5c:bc:ab:13:0a:3a:
47:76:63:d0:42:c8:2a:f5:8e:40:a2:f9:25:e4:5e:
06:93:c1:eb:ee:1a:bf:e4:80:1e:50:76:fb:e3:48:
3b:94:3e:ce:34:dd:17:dc:5e:99:19:fa:db:00:f5:
4a:77:94:89:9a:26:ff:0e:7c:ca:41:87:78:41:52:
ae:7b:20:42:c3:e8:c1:4f:04:e4:e6:2b:1a:36:53:
38:e0:68:e2:c4:e2:04:a7:e6:61:d1:42:1f:01:cf:
ba:de:0d:66:3a:da:fd:db:8d:88:1a:82:9d:9c:29:
28:5c:b4:39:8f:64:6d:3b:46:16:26:fc:e9:21:83:
c4:a3:8a:70:43:1d:2f:39:8e:e3:a6:21:a3:71:80:
1e:a8:c1:a4:a7:9a:42:95:0d:f6:97:82:4d:72:b0:
a0:18:93:d7:bc:d1:73:15:1e:c1:ae:7a:33:ed:be:
4a:eb:3f:6d:61:48:5a:25:18:d0:ed:b8:11:71:88:
13:d1:7b:70:47:7c:c8:19:bc:be:8d:91:8d:f3:0c:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E1:05:92:BC:C6:8A:60:14:46:31:D3:8A:C1:17:1D:0F:55:9D:7A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144551.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a76d::/32
Signature Algorithm: sha256WithRSAEncryption
35:a8:07:84:3f:c0:40:4c:8c:2c:95:ed:00:89:24:27:66:b6:
a9:81:d2:cd:c0:f7:01:ef:35:73:f0:90:a3:de:d9:73:7c:d1:
52:6b:f4:31:a9:07:8b:44:60:54:71:8e:87:46:92:07:cd:c3:
b7:67:44:4a:f7:46:dc:07:4d:41:76:58:86:1e:eb:6c:1e:af:
00:64:34:80:c3:00:4c:e4:d4:72:d3:13:f0:4d:b5:b2:f2:87:
2d:d7:dc:a6:e9:3e:87:72:48:96:9d:3b:32:7d:ec:fb:e0:5e:
b3:52:df:98:d8:11:0d:e9:bf:41:2e:b7:8d:a5:26:b2:9e:46:
f4:20:cc:01:f7:54:6a:55:39:d8:c1:5e:47:65:cd:33:0a:24:
fe:fe:f6:4f:63:a4:72:25:1a:d5:0c:1a:95:f9:57:53:76:b5:
1e:e6:d5:ef:53:30:7f:3c:64:44:0d:cc:54:18:81:1b:65:46:
77:9e:91:95:4f:41:8c:9f:81:ba:bf:76:42:5b:94:1f:46:ec:
fb:93:03:c8:a8:92:54:46:17:1e:8e:76:9f:08:d1:fa:ec:bd:
05:be:bb:84:5d:1e:60:ce:4e:c1:bf:c6:7b:88:fd:4f:ba:30:
1d:11:ec:bf:87:00:6c:61:26:f7:5b:90:81:ad:01:48:87:4b:
30:b4:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:04 2026 by rpki-client